High
CVE-2021-21996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
High
CVE-2021-23404
Cross-Site Request Forgery in sqlite-web
High
CVE-2021-23437
Uncontrolled Resource Consumption in pillow
Low
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Low
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Medium
CVE-2020-19002
Mezzanine Cross Site Scripting (XSS) vulnerability
Critical
CVE-2020-19001
Command Injection in Simiki
Medium
CVE-2020-19000
Cross Site Scripting (XSS) in Simiki
Critical
CVE-2021-39159
remote code execution via git repo provider
High
CVE-2021-39160
Code injection in nbgitpuller
High
CVE-2021-39371
XML External Entity Injection in PyWPS
Medium
CVE-2020-18899
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Medium
CVE-2021-39286
Cross-site scripting in pywb
Medium
CVE-2020-18699
Lin-CMS-Flask Cross Site Scripting (XSS) vulnerability
Critical
CVE-2020-18698
Lin-CMS-Flask vulnerable to Improper Authentication
Unrated
CVE-2020-18701
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token up
Critical
CVE-2020-18705
Improper Restriction of XML External Entity Reference in Quokka
Critical
CVE-2020-18704
Unrestricted Upload of File with Dangerous Type in django-widgy
Critical
CVE-2020-18703
Improper Restriction of XML External Entity Reference in Quokka
Medium
CVE-2020-18702
Cross Site Scripting (XSS) in Quokka
Medium
CVE-2021-35936
Missing Authorization in Apache Airflow
Medium
CVE-2021-23423
Path Traversal in bikshed
High
CVE-2021-23422
OS Command Injection in bikeshed
Critical
CVE-2021-37705
Improper Authorization and Origin Validation Error in OneFuzz
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.